JFrog
A single HTTP request can completely take over the Reachy Mini AI robot
Five vulnerabilities in the Reachy Mini AI robot could allow an attacker on the same network to take control of the device without authentication. JFrog says the attack…
JFrog: Artifactory is safe, but Linux kernel flaw CVE-2026-98432 may expose hosts
JFrog says Artifactory, Xray and the rest of its platform are not affected by Linux kernel vulnerability CVE-2026-98432, but it is urging self-managed customers to check…
JFrog Urges CISOs to Answer "Are We Exposed?" After Curl, PHP and LiteLLM Incidents
JFrog says recent vulnerabilities and a package compromise affecting Curl, PHP and LiteLLM show why security chiefs must be able to answer "Are we exposed?" quickly. In…
JFrog Names Nine Winners in First Software Supply Chain Excellence Awards
JFrog has completed its first Software Supply Chain Excellence Awards, naming nine winners across the Americas, Europe and Asia-Pacific. The honorees, including Ford…
JFrog: AI Is Flooding the CVE System With Noise and Fabricated Advisories
AI has lowered the barrier to vulnerability research so far that the CVE ecosystem is struggling with volume, according to a JFrog analysis. The company says…
JFrog AI Security now detects Shadow AI on developer workstations
JFrog has extended the Shadow AI detection in its JFrog AI Security product from repositories to developer laptops and workstations. According to the company, the new…
JFrog Adds Intent Scanning for AI Agent Skills, Plugins and APM Packages
JFrog says conventional AppSec tools such as SCA and SAST can miss threats hidden in AI assets like agent skills, plugins and APM packages, because these assets carry…
JFrog CISO: AI Is Reshaping the Vulnerability Backlog, Not Just Growing It
A JFrog blog post argues that AI has changed the shape of the vulnerability backlog: it is longer, it grows faster than release cycles can handle, and the old practice…